SOC Engineer

Responsibilities

• Handle complex incident response and lead investigations for high-severity escalations.
• Assess and improve telemetry and logging coverage across endpoint, network, identity, and cloud environments.
• Ensure SIEM and detection quality by evaluating detection fidelity, data normalization, and alert logic.
• Contribute to response automation quality by reviewing enrichment logic and SOAR containment playbooks.
• Support technical needs across the organization, serving as a resource for engineers and customers.
• Improve SOC tooling and operational workflows to reduce friction in triage and investigation.

Requirements

• 5+ years in security operations, incident response, or detection engineering.
• Strong fluency in logging and telemetry evaluation to identify coverage deficiencies.
• Hands-on experience with SIEM platforms (e.g., Google Chronicle, Microsoft Sentinel, or Splunk).
• Solid understanding of response automation, including enrichment pipelines and SOAR playbook structure.
• Working knowledge of cloud security architecture in AWS, Azure, or GCP.
• Proficiency in Python or PowerShell for automation and integration work.
• Clear and confident communication skills for both technical and non-technical audiences.

Preferred Qualifications

• Experience with multi-cloud security tooling across AWS, Azure, and GCP.
• Experience with Infrastructure as Code (Terraform, CloudFormation) and DevSecOps practices.
• Familiarity with applying AI or LLM-based tooling to security workflows and agentic workflows.
• Deep expertise in Splunk Enterprise Security or container/Kubernetes security monitoring.
• Relevant certifications such as CISSP, GCIH, GCFE, or cloud security credentials.

Benefits

• Opportunity to work with cutting-edge AI-driven cybersecurity technologies.
• Competitive salary and benefits package.
• A culture of growth and development in AI and emerging security technologies.

About the Company

TENEX is an AI-native, automation-first Managed Detection and Response (MDR) provider. Backed by Andreessen Horowitz, we are a fast-growing startup dedicated to revolutionizing the MDR landscape through advanced threat detection and rapid response. We prioritize in-person collaboration and are building a team of industry experts to serve as a force multiplier for defenders worldwide.